expedition vulnerabilities and fixes

Recent CVEs affecting expedition, with upgrade or downgrade steps. 10 tracked.

expedition has 10 tracked vulnerabilities, 3 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 10. Most recent: 2025-01-11. Highest priority: CVE-2024-9465 (score 92/100).

• CVE-2025-0107 CRITICAL 9.8 UPGRADE An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to
• CVE-2025-0106 MEDIUM 5.3 UPGRADE A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enum
• CVE-2025-0105 CRITICAL 9.1 UPGRADE An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker
• CVE-2025-0104 MEDIUM 6.1 UPGRADE A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to exe
• CVE-2025-0103 HIGH 8.8 UPGRADE An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Ex
• CVE-2024-9467 MEDIUM 6.1 UPGRADE A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in th
• CVE-2024-9466 MEDIUM 6.5 UPGRADE A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenti
• CVE-2024-9465 CRITICAL 9.1 EXPLOITED UPGRADE Palo Alto Networks Expedition SQL Injection Vulnerability
• CVE-2024-9464 MEDIUM 6.5 UPGRADE An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run
• CVE-2024-9463 HIGH 7.5 EXPLOITED UPGRADE Palo Alto Networks Expedition OS Command Injection Vulnerability

FAQ

How do I fix expedition vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is expedition being exploited right now?

Yes: 2 expedition CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which expedition CVE should I patch first?

CVE-2024-9465 currently ranks highest (92/100): Palo Alto Networks Expedition SQL Injection Vulnerability.

RSS feed for expedition · ← Back to latest CVEs